TWC: TTP Option: Medium: Collaborative: ENCORE - ENhanced program protection through COmpiler-REwriter cooperation

TWC：TTP 选项：中：协作：ENCORE - 通过 COmpiler-REwriter 合作增强程序保护

• 批准号: 1513837
• 负责人: Michael Franz
• 金额: $ 61.93万
• 依托单位: University of California-Irvine
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-07-01 至 2018-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1513837&HistoricalAwards=false
• 关键词: TWC; TTP; Option; Medium; Collaborative

Critical errors in widely used software are discovered almost every day. They currently leave users of that software vulnerable to cyber attacks until the manufacturer eventually supplies a fix - sometimes this takes unacceptably long. There currently is no way that users of commercial off-the-shelf software that is distributed as binary code can go and fix such vulnerabilities themselves, ex post facto, because software is not easily changeable once it has been compiled to binary form. This research project investigates techniques for enabling consumer-side rewriting of binary software. The approach is appealing because it can be deployed quickly in response to new threats, without waiting for code-producers, and can enforce consumer-specific security policies unsupported or unforeseen by the software?s developers. If successful, this research will lead to significant improvements in software security.Consumer-side binary rewriting is currently not feasible because binary files don't contain enough information to do it safely. On the other hand, code producers don't want to reveal too many implementation details of their code due to intellectual property and software piracy concerns. The key goal of this project is to enable code producers to supplement their binary code with a small amount of metadata that can be used, consumer-side, to perform sophisticated binary rewriting, but without disclosing much extra information about the internal working of the code and without making reverse-engineering much easier than before. The project will produce a prototype implementation consisting of a producer-side metadata derivation engine, and a consumer-side binary rewriting engine using this metadata to safely perform binary code manipulation.

几乎每天都会发现广泛使用软件中的关键错误。他们目前使该软件的用户容易受到网络攻击的影响，直到制造商最终提供解决方案为止 - 有时这需要不可接受的时间。当前，由于二进制代码可以自己修复此类漏洞，事实上，因此无法分发商业现成软件的用户，因为一旦将软件汇编为二进制形式，因此不容易更改软件。该研究项目调查了启用消费者端二进制软件的技术。这种方法很有吸引力，因为它可以响应新威胁而无需等待代码生产商而迅速部署，并且可以通过软件开发人员执行不支持或无法实施的特定于消费者的安全策略。如果成功的话，这项研究将导致软件安全性的显着改善。当前二进制重写目前不可行，因为二进制文件不含足够的信息来安全地进行。另一方面，由于知识产权和软件盗版问题，代码生产商不想透露其代码的太多实施详细信息。该项目的关键目标是使代码生产商能够用少量的元数据补充其二进制代码，可以使用消费者侧来执行复杂的二进制重写，但没有透露有关代码内部工作的很多额外信息，也没有比以前更容易进行反向工程。该项目将生产由生产者端元数据推导引擎组成的原型实现，以及使用此元数据安全执行二进制代码操作的消费者端二进制重写引擎。